Root cause analysis / Investigation

copilot.microsoft.com

Reference RCA-70204E43299C3EC6

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

06 Nov 2026 16:35 – 06 Nov 2026 20:34 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
1.359 ms
1.377 ms
0.956 ms
1.093 ms
1.033 ms
1.073 ms
1.399 ms
1.058 ms
1.063 ms
0.995 ms
1.046 ms
1.335 ms
11.946 ms
20.231 ms
1.407 ms
1.009 ms
0.982 ms
0.981 ms
0.952 ms
3.693 ms
1.794 ms
1.370 ms
0.951 ms
0.983 ms
0.978 ms
1.469 ms
2.831 ms
1.382 ms
1.422 ms
1.401 ms
1.525 ms
1.420 ms
1.360 ms
1.434 ms
8.574 ms
7.898 ms
1.569 ms
1.384 ms
0.990 ms
0.969 ms
0.990 ms
1.029 ms
1.381 ms
1.370 ms
1.567 ms
14.370 ms
1.128 ms
1.342 ms
19.697 ms
0.996 ms
2.842 ms
1.360 ms
0.928 ms
0.995 ms
1.035 ms
1.425 ms
0.975 ms
2.355 ms
1.373 ms
1.382 ms
1.439 ms
0.990 ms
1.038 ms
4.090 ms
4.796 ms
1.015 ms
20.867 ms
0.986 ms
16.664 ms
0.998 ms
1.423 ms
11.960 ms
1.077 ms
2.648 ms
1.003 ms
4.082 ms
1.008 ms
1.066 ms
0.975 ms
1.413 ms
3.270 ms
1.381 ms
1.006 ms
1.033 ms
4.879 ms
12.276 ms
16.084 ms
1.032 ms
1.356 ms
1.428 ms
1.363 ms
1.382 ms
1.382 ms
1.033 ms
1.401 ms
1.436 ms
1.362 ms
0.997 ms
1.363 ms
1.505 ms
1.041 ms
0.981 ms
0.972 ms
1.022 ms
1.343 ms
1.028 ms
0.966 ms
1.140 ms
1.362 ms
0.980 ms
1.394 ms
1.511 ms
1.419 ms
1.074 ms
1.004 ms
1.095 ms
1.013 ms
1.341 ms
1.396 ms
1.349 ms
5.679 ms
1.031 ms
1.043 ms
1.678 ms
1.448 ms
1.368 ms
1.687 ms
1.002 ms
1.440 ms
1.397 ms
1.394 ms
0.996 ms
1.015 ms
16.663 ms
1.080 ms
10.460 ms
1.400 ms
1.399 ms
3.000 ms
0.984 ms
1.007 ms
0.979 ms
1.355 ms
1.013 ms
1.456 ms
1.002 ms
1.011 ms
1.021 ms
6.504 ms
17.858 ms
20.701 ms
0.973 ms
1.000 ms
1.384 ms
1.397 ms
1.174 ms
1.047 ms
1.162 ms
13.558 ms
1.081 ms
16.159 ms
1.282 ms
4.258 ms
0.964 ms
1.061 ms
0.978 ms
6.176 ms
1.089 ms
1.008 ms
1.015 ms
14.160 ms
1.645 ms
17.654 ms
0.963 ms
0.956 ms
0.976 ms
19.900 ms
1.003 ms
1.039 ms
1.162 ms
12.745 ms
1.405 ms
0.990 ms
1.384 ms
1.079 ms
0.978 ms
1.415 ms
0.946 ms
0.958 ms
1.165 ms
1.434 ms
13.948 ms
0.999 ms
1.414 ms
8.442 ms
10.173 ms
1.005 ms
21.354 ms
1.387 ms
1.431 ms
1.425 ms
14.835 ms
0.950 ms
1.413 ms
0.982 ms
7.029 ms
1.443 ms
0.966 ms
15.184 ms
2.666 ms
1.834 ms
1.112 ms
2.265 ms
0.988 ms
1.384 ms
1.439 ms
9.121 ms
1.054 ms
0.953 ms
10.469 ms
0.954 ms
1.160 ms
1.028 ms
16.965 ms
1.007 ms
1.120 ms
1.028 ms
1.387 ms
1.415 ms
1.366 ms
1.432 ms
1.364 ms
1.018 ms
1.382 ms
1.024 ms
1.022 ms
0.986 ms
1.427 ms
1.400 ms
1.374 ms
0.976 ms
1.558 ms
1.007 ms
1.405 ms
1.085 ms
1.405 ms
1.419 ms
1.378 ms
1.380 ms
7.406 ms
1.367 ms
1.409 ms
4.376 ms
1.425 ms
1.029 ms
1.004 ms
14.567 ms
1.364 ms
1.457 ms
0.963 ms
5.491 ms
0.954 ms
1.048 ms
2.410 ms
18.396 ms
1.018 ms
1.364 ms
1.380 ms
0.976 ms
0.983 ms
14.318 ms
1.531 ms
1.020 ms
1.422 ms
0.938 ms
1.380 ms
0.963 ms
1.381 ms
1.444 ms
1.713 ms
0.972 ms
1.399 ms
1.357 ms
1.432 ms
1.387 ms
1.063 ms
2.349 ms
1.369 ms
8.630 ms
1.090 ms
1.351 ms
1.005 ms
1.022 ms
1.468 ms
0.989 ms
0.980 ms
1.000 ms
1.368 ms
1.476 ms
1.389 ms
1.352 ms
0.987 ms
1.393 ms
1.444 ms
0.988 ms
1.071 ms
1.312 ms
1.030 ms
1.077 ms
1.399 ms
4.127 ms
1.009 ms
1.477 ms
0.960 ms
1.040 ms
1.158 ms
1.395 ms
0.977 ms
1.053 ms
1.359 ms
1.379 ms
1.536 ms
1.389 ms
1.362 ms
1.362 ms
1.036 ms
1.413 ms
1.386 ms
1.365 ms
1.368 ms
1.354 ms
1.427 ms
0.996 ms
1.502 ms
1.374 ms
1.052 ms
0.966 ms
1.007 ms
14.730 ms
1.478 ms
1.017 ms
1.422 ms
1.023 ms
1.000 ms
0.977 ms
1.392 ms
1.102 ms
1.404 ms
1.027 ms
0.987 ms
0.961 ms
1.411 ms
1.355 ms
1.006 ms
1.548 ms
1.029 ms
0.964 ms
1.008 ms
1.044 ms
Network path / recorded observations

Network path observations.

25 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.324 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.192 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.141 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.283 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop5.243 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.407 msReply RTT AS13335 · Cloudflare
Before

ICMP traceroute · Destination 1

Comparison window · median of 11 traces


to UTC

  1. TTL 1 Stealth associated hop0.136 msMedian reply RTT11/11 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.201 msMedian reply RTT11/11 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop4.941 msMedian reply RTT9/11 replies · 81.8%ASN unavailable
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
Before

TCP/443 traceroute · Destination 2

Comparison window · median of 16 traces


to UTC

  1. TTL 1 Stealth associated hop0.168 msMedian reply RTT16/16 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.189 msMedian reply RTT16/16 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop5.788 msMedian reply RTT11/16 replies · 68.8%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Destination reply1.280 msMedian reply RTT12/16 replies · 75.0%ASN unavailable
  7. TTL 7 Destination reply1.682 msMedian reply RTT4/16 replies · 25.0%ASN unavailable
Before

ICMP traceroute · Destination 3

Comparison window · median of 19 traces


to UTC

  1. TTL 1 Stealth associated hop0.134 msMedian reply RTT19/19 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.184 msMedian reply RTT19/19 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop2.648 msMedian reply RTT14/19 replies · 73.7%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
Before

TCP/443 traceroute · Destination 4

Comparison window · median of 14 traces


to UTC

  1. TTL 1 Stealth associated hop0.157 msMedian reply RTT14/14 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.192 msMedian reply RTT14/14 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop6.586 msMedian reply RTT12/14 replies · 85.7%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Destination reply1.370 msMedian reply RTT9/14 replies · 64.3%ASN unavailable
  7. TTL 7 Destination reply1.909 msMedian reply RTT5/14 replies · 35.7%ASN unavailable
Before

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.118 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.183 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop11.056 msReply RTT AS13335 · Cloudflare
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.189 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.205 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop14.626 msReply RTT AS13335 · Cloudflare
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop1.027 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.223 msReply RTT AS13335 · Cloudflare
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.143 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.192 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop8.972 msReply RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop1.702 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.562 msReply RTT AS13335 · Cloudflare
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.141 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.246 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.139 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.606 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop1.529 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.489 msReply RTT AS13335 · Cloudflare
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.212 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.202 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop17.350 msReply RTT AS13335 · Cloudflare
During

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.148 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.178 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop5.377 msReply RTT AS13335 · Cloudflare
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop2.145 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.435 msReply RTT AS13335 · Cloudflare
During

ICMP traceroute · Destination 1

Comparison window · median of 17 traces


to UTC

  1. TTL 1 Stealth associated hop0.129 msMedian reply RTT17/17 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.185 msMedian reply RTT17/17 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop2.332 msMedian reply RTT11/17 replies · 64.7%ASN unavailable
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
During

TCP/443 traceroute · Destination 2

Comparison window · median of 13 traces


to UTC

  1. TTL 1 Stealth associated hop0.173 msMedian reply RTT13/13 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.201 msMedian reply RTT13/13 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop5.160 msMedian reply RTT12/13 replies · 92.3%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Destination reply1.381 msMedian reply RTT6/13 replies · 46.2%ASN unavailable
  7. TTL 7 Destination reply1.844 msMedian reply RTT7/13 replies · 53.8%ASN unavailable
During

ICMP traceroute · Destination 3

Comparison window · median of 13 traces


to UTC

  1. TTL 1 Stealth associated hop0.136 msMedian reply RTT13/13 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.184 msMedian reply RTT13/13 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop10.175 msMedian reply RTT12/13 replies · 92.3%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
During

TCP/443 traceroute · Destination 4

Comparison window · median of 17 traces


to UTC

  1. TTL 1 Stealth associated hop0.168 msMedian reply RTT17/17 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.189 msMedian reply RTT17/17 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop13.692 msMedian reply RTT14/17 replies · 82.4%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Destination reply1.429 msMedian reply RTT14/17 replies · 82.4%ASN unavailable
  7. TTL 7 Destination reply2.130 msMedian reply RTT3/17 replies · 17.6%ASN unavailable
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.133 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.184 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop0.965 msReply RTT AS13335 · Cloudflare
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.160 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.220 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop1.522 msReply RTT AS13335 · Cloudflare
  4. TTL 4 Probe hop1.885 msReply RTT AS13335 · Cloudflare
  5. TTL 5 Probe hop3.564 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.280 msReply RTT AS13335 · Cloudflare
After

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.116 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.186 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop39.020 msReply RTT AS13335 · Cloudflare
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.143 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.897 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop12.617 msReply RTT AS13335 · Cloudflare
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop2.278 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.254 msReply RTT AS13335 · Cloudflare
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.125 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.177 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop12.660 msReply RTT AS13335 · Cloudflare
After

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.156 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.199 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop7.011 msReply RTT AS13335 · Cloudflare
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop1.267 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination0.978 msReply RTT AS13335 · Cloudflare
After

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.135 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.307 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.176 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.191 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop3.975 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.011 msReply RTT AS13335 · Cloudflare

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

TCP traceroute / 443 · Recorded address 2

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.143 msAS8002 · Stealth0.148 msAS8002 · StealthSame responder
20.192 msAS8002 · Stealth0.178 msAS8002 · StealthSame responder
38.972 ms5.377 msAS13335 · CloudflareSame responder
4No replyNo replyNot established
51.702 msAS13335 · Cloudflare2.145 msAS13335 · CloudflareSame responder
61.562 msAS13335 · Cloudflare1.435 msAS13335 · CloudflareSame responder

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Findings differ by destination.

Findings differ between destination comparisons. The evidence does not point to one location for the whole event.

What we observed

  • A sustained increase in measured round trip time was observed.
  • Stored traces were compared using matching source and destination addresses.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT1.123 msUsual round trip before the event
Last recorded event RTT1.374 msLast successful event recording
Event p95 RTT17.678 ms95th percentile of successful recordings
Change from baseline+0.251 msLast event RTT compared with the baseline
Successful / expected recordings238 / 240Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology